Quantum states for perfectly secure secret sharing 
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In this work, we investigate what kinds of quantum states are feasible to perform perfectly secure 
secret sharing, and present its necessary and sufficient conditions. We also show that the states 
are bipartite distillable for all bipartite splits, and hence the states could be distillable into the 
Greenberger-Horne-Zeilinger state. We finally exhibit a class of secret-sharing states, which have an 
arbitrarily small amount of bipartite distillable entanglement for a certain split. 
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Introduction. — Entanglement has been considered as 
one of the most crucial resources for quantum commu- 
nication, which has been shown to be perfectly secure 
against any interior/exterior eavesdropper. The perfect 
security seems to be due to the pure entanglement. How- 
ever, in the case of the quantum key distribution^^ appro- 
priately defining its perfect security as in Refs. [ll, I2|> '^^ 
can see that only pure entanglement does not guarantee 
the perfect security. 

We here focus on another quantum communication 
protocol, the quantum secret sharing of classical infor- 
mation, originally presented by Hillery et al. [j|- Our 
question is what kinds of quantum states are feasible to 
perform the perfectly secure secret sharing (PSSS). In 
order to answer this question, first of all, it is required to 
present the conditions for the PSSS. 

One of the most important problems in secret sharing 
of classical information is how to share random bits se- 
curely between one dealer, Alice and other players. Bob 
and Charlie. If each participant would securely share one 



TABLE I: Random bits for secret sharing 



Alice 


Bob 


Charlie 






1 



1 


1 



1 


1 




of the random bit sequences as in TABLE I, then Alice 
could secretly make Bob and Charlie share her secret bit. 

Thus, for the PSSS, the two following conditions must 
be satisfied: (i) Probability distributions of all partici- 
pants' secret bits should be unbiased and perfectly corre- 
lated, that is, if we let pij^ be the probability that Alice, 
Bob, and Charlie get the random bits i, j, and k, respec- 
tively, then pooo = Poii = Pwi = Piw = 1/4 and pijk = 
for other i, j, k. (ii) Eavesdropper should not be able to 
obtain any information about participants' secret bits. 

In this work, according to the two above conditions, we 
show that PABCA'B'C is a quantum state for the PSSS 



if and only if it is of the form 



E 



l«j'^>Ai3c(*'/^'l ^ UtjkPA'B'C'UL,,^,, 



i+3 + k = (mod 2) 
'+j' + fc'sO (mod 2) 



(1) 

where pa'B'c is a state on subsystem A' B'C , and UijkS 
are unitary operators. We call this form of states in ([1]) 
the secret- sharing states. 

We also show that the states are bipartite distillable 
for all bipartite splits. From the results of Diir et al. [J| 
we can readily derive the fact that if any n-qubit state 
has negative partial transposition for all bipartite splits 
then it is distillable into the Greenberger-Horne-Zeilinger 
(GHZ) [51 state. Hence, the secret-sharing states could 
be also distillable into the GHZ state. 

Furthermore, we show that our results can be general- 
ized into multipartite cases, that is, p„ is an n-qubit state 
for the PSSS consisting of one dealer and n — 1 players if 
and only if it is of the form 



1 



E^ 

I ,j^^^ 



\I)ma,-aSJ\®Uipa'^a',-A'U], (2) 



where pA' A' -Ai^ is a state on subsystem A[A'2 ■ ■ ■ A'^^, 
and Ui's are unitary operators, and that p„ is bipartite 
distillable for its all bipartite splits. Hence, as in the 
three-party case, p„ could be distillable into the n-qubit 
GHZ state. 

Secret- Sharing States. — We first provide necessary 
and sufficient conditions for a state to perform the PSSS. 
Let A, B, and C be qubit systems, and A', B' , and C" 
be of arbitrary dimensions. Here AA' , BB', and CC are 
Alice's, Bob's, and Charlie's systems, respectively. Then 
we obtain the following theorem. 

Theorem 1. Any state is a quantum state for the 3- 
party PSSS if and only if it is a secret-sharing state of 
the form in (Qp. 



Proof. We first assume that pabcA'B'c 
state for the PSSS, and let I* 



is a quantum 
abcA'B'C'E be its purifi- 



cation as follows: 

\^/ABCA'B'C'E 



ABc\^iJ'^'A'B'C'E^ 



(3) 
where E is the system of the eavesdropper, Eve. Since 
probability distributions of all participants' secret bits 
are unbiased and perfectly correlated, it is clear that 
Pooo = Poll = Pioi = Piio = 1/4 and p^jk = for other i, 
j, k. Thus, the state |^) becomes 



E 

i+j+k=0 (mod 2) 



ijk) 



ABc\^ii>^'A'B'C'E- 



(4) 



For each of all participants' measurement result ijk, 
let pfji. be Eve's state after the measurement. Then 

Pf]k = trA'B'C (|*Jife)(*y7c|)- Since Eve cannot obtain 
any information about participants' secret bit at all, we 
have p^oo = pf^i = pf^^ = pfig. For each i, j, k, let 
pfjk — S; ^i\4>i){4'i\ be its spectral decomposition. Then 
it follows from Gisin-Hughston-Jozsa-Wootters (GHJW) 
theorem [6| that for each i, j, k, there are unitary oper- 
ators Uijk on the system A'B'C such that 



*yfc) = 



E 



AiC/yTclV'l 



V A'B'C 



'\<f>l\ 



_E' 



(5) 



where |^/) forms an orthonormal set for the system 
A'B'C Hence, by Eqs. (g]) and (O, pabcA'B'C" is of 
the form 



E 



Izjfc) 



ABC 



i+j + k = (mod 2) 
' + j'+k'sO (mod 2) 



[i'j'k'\(»UijkpA'B'C'Ulj,k,, 



(6) 



where pa'B'C = Z); '^dV'^)(V'^l■ 
Conversely, we now assume that a given state 
PABCA'B'C is of the form ^. Then since for the prob- 
abilities pijk that participants get the bits ijk pooo — 
Poll = Pioi = Piio = 1/4 and pijk = for other i, j, k, 
probability distributions for the secret bits are clearly un- 
biased and perfectly correlated. Thus, it suffices to show 
that Eve cannot any information about the secret bits. 



that IS, Pqqq — Pq]_j_ — P]_Q]_ — Puo, 



'^^jk 



where pf<i. is Eve's 



state when participants' measurement result is ijk. For 
convenience, we consider the following block matrix form 

of PABCA'B'C- 



f -'^ooo.ooo 





^000,011 





-^^000,101 


-'^000,110 \ 






































-''^Oll.OOO 





-'^011,011 





-'foil, 101 


-'^011. 110 




















-'^lOl.OOO 





-'^101,011 





-^101,101 


-''^loiaio 


-'^IIO.OOO 





-'^llO.Oll 





-^110,101 


-''^iioaio 


^ 














0/ 



(7) 



where X 



UijkPA'B'C'Ul.,,., . Then we can read- 



ijk,i'j'k' — '-^ijkHA' B'C"^ iij'k' 

ily obtain that the trace norm oi Xijk.i'j'k' is one, that 
is, \\Xijks'j'k'\\i — 1- Let the state in Eq. ^ be the 
purification of pabcA'B'C- Then we have Xijk,i'j'k' = 
tr_E (|^jjfc)(^j'j'fe'l)- It follows from straightforward cal- 
culations that 



\\Xijk,i'j'k'\\i — tr 



P\Pijk^Pi'j'k')-> 



(8) 

where F is the fidelity. Since P{pfjkT p'^j'k') ~ ^ ^"-"^ every 
i, j , fc, the proof is completed. D 

We remark that, as seen in the proof of Theorem [U 
in order to prove its converse, it is sufficient to use 
that the trace norms of three well-chosen off-diagonal 
blocks are one, for example, ||Xooo,oii||i = ||-^oii,ioi||i = 
||Xioi,iio||i — 1- Moreover, any block matrix of the form 
in ([7|) whose three well-chosen off-diagonal blocks have 
trace norm 1/4 forms a secret state as follows. 

Theorem 2. oabca'B'c is a state which can he ex- 
pressed as the following block-matrix form: 



(PABCA'B'C 



( i^ Q Q X 


• • g\ 





GOOD 








* • 


y 7^ 








• 00* 


• Z 


* • 


• 7^ 


^0000 


0/ 



(9) 



where \\X\\i = |lr||i = \\Z\\i = 1/4 if and only if 
(PABCA'B'C is a secret-sharing state. 

Proof. Since any secret-sharing state is of the form ^ , it 
suffices to show that (Jabca'B'c in © is a secret-sharing 
state. For each ijk, let pijk be the trace of (ijk, ijk) block 
entry of CT^scA'B'c- Then 



I*) = Vp^\0(^0)^bc\'^qoo)a'b'ce 
+\^on|011)^scl*oii)A'B'C'B 
+VpI^|101>abcI*ioi>a'B'C'b 

+ Vm^|110>AScl*llo)A'i3'C'B 



(10) 



is its purification, and hence we obtain 

X = VPoooPoiitrfi (|*ooo)(*oii|) , 
Y = VPoiiPioitri=;(|^oii)(*ioi|), 
Z = VPioiPiiotr_B (|^ioi)(*iio|) • 

As in the proof of Theorem [U we have 



(11) 



l^lli 

rill 
nil 



y/POOOPOllF (PoOO' Poll) ' 

VpouPwiF {poii,Pwi) , 
VPioiPiioF (pfoi, pfio) , 



(12) 



where pf.^ = tr^'S'c (|%fc)(%fe|)- Since |lX||i = 
||y||i = \\Z\\i = 1/4, we have the following inequalities: 



Pooo+Paii . , . 1 

^ > VPoooPoii > ^, 

Poii+PiQi . , . 1 

^ > VPouPwi > ^7 

Pioi+Piw . , . 1 

^ > VPwiPiw > ^- 



(13) 



It follows from the fact pooo +Poii +Pioi +J5iio = 1 that 
Pooo = Poll == Pioi = Piio = 1/4 and -F (p^oo^ Poii) = 
-F^(pfii,pfoi) = ^(pfoi.pfio) - 1- This implies that 
CABCA'B'C is a state for the PSSS. Therefore, it is a 
secret-sharing state by Theorem [TJ D 

We note that every private state is distillable [7|. By 
employing this note, we now show that every secret- 
sharing state is bipartite distillable for its all bipartite 
splits. 

Theorem 3. Let p be a secret-sharing state for the 3- 
party secret sharing. Then p is bipartite distillable for its 
all bipartite splits of the 3 parties. 

Proof. By Theorem [I] p can be expressed as the form of 
([1]) for some state pa'B'C" and unitary operators C/yfe. 
Let CNOTjj be the controUed-NOT operation such that 
i and j represent its control system and target system, 
respectively. Then applying CN0Tb(7 to p and perform- 
ing the projective measurement on system B with respect 
to the standard basis {|0), |1)}, when the measurement 
result is r, the resulting state becomes a private state. 



-t 

hj=0 



l">AcO'il "^ U^r^PA'B'C"U]^,, 



(14) 



which is distillable Q- Thus, a given p is bipartite distil- 
lable for the split AA'-BB'CC . Similarly, we can show 
that p is bipartite distillable for the splits BB'-CC'AA' 
and CC'-AA'BB'. D 

Generalization into multipartite cases. — We now gen- 
eralize our results into multipartite cases. 

Theorem 4. p„ is a quantum state for the n-party PSSS 
consisting of one dealer and n — 1 players if and only if 
it is a secret- sharing state of the form in 0). 



Proof. Let |^) be a purification of p„ as follows: 



l*> = 1^ V¥J\I)a,a.-a„ 



* 



I/A[A'.^---A'^E- 



(15) 



Pj s are the same. Thus, by GHJW theorem there are 
a state Pa' A' -A' and unitary operators Uj on the sys- 
tem A[A2 ■ ■ ■ A'^ such that p„ is of the form in ^ and 
PA' A' ---A' has the same spectrum as pf. 

Conversely, assuming that a given state p„ is of the 
form ([2]), it can be readily shown that pn is a state for n- 
party PSSS, by the same way as the proof of Theorem[T] 

D 

We call the state in ^ the n-party secret-sharing state. 
Remark that, as in Theorem [1] and Theorem [2l any quan- 
tum state of the form of 2" x 2" block matrix, whose block 
entries vanish if they are in the rows or columns of odd 
parity, has well-chosen 2"^^ — 1 off-diagonal block en- 
tries of the trace norm 1/2"^^ if and only if the state is 
an n-party secret-sharing state. 

We now consider the bipartite distillability of the n- 
party secret-sharing states. 

Theorem 5. Any n-party secret- sharing state pn is bi- 
partite distillable for all bipartite splits of the n parties. 

Proof. We use the mathematical induction on n > 3. 
Then if n = 3 then this theorem is true by Theorem [3l 
We assume that this theorem is true for (n — l)-party 
secret-sharing states. Let P be an arbitrary bipartite 
spht Iq-Ii of the n parties, {AiA[,A2A2,...,AnA'^}. 
Then for AjA'j,AkA',^ e /q applying CNOTa.a, to pn 
and performing the projective measurement on system 
Aj with respect to the standard basis {|0), |1)}, the re- 
sulting state becomes an (n — l)-party secret-sharing 
state. By the induction hypothesis, the state is bipar- 
tite distillable for the split, Iq — {AjA'A-Ii, and hence 
Pn is also bipartite distillable for Iq-Ii- This completes 
the proof. n 

Example. — We construct a class of secret-sharing 
states in a similar way to one presented in [l]. Consider 
the following state: 



P = ao\'4>o){ipo\(g)ao-\-ai\i>i){i>i\(g)ai 

+a2|^2)('02| <8)CT2 -Ha3|V'3)(V'3| ® era. 



(16) 



where 



\^o) - 


= -(|000) + |011) + |101) + |110)) 


\A) = 


= i(|000) + |011)-|101)-|110)) 


IV'2) = 


= i(|000)-|011) + |101)-|110)) 


IV'3) = 


= i(|000)-|011)-|101) + |110)) 



(17) 



As in the case of the 3-party case, it is clear that 
Pi = 1/2"^^ for all / with even parity and pj — for 
other J. For each of all participants' measurement re- 
sult /, Eve's state after the measurement, pf becomes 
pf = ^^A'A'---A' (l*/)(^/|)- Since Eve cannot obtain 
any information about participants' secret bit at all, all 



and the states aj have support on orthogonal subspaces. 
Then one can readily verify that p is a 3-party secret- 
sharing state, since ||aotTo i oiCTi ± 02^2 ± Qscslji = 1. 

As in Ref. [l| , one can find a secret-sharing state which 
can have an arbitrarily small amount of bipartite distill- 
able entanglement for a certain split. In order to find such 



a state, take uq = ai and 02 = 03 such that 01+02 — 1/2, 
and 



Co 


= Ps(g>\U){{)\, 


Cl 


= Pa(d\0){Ol 


0-2 


- Pa®|l)(l|, 


CT3 


= P.®|1>(1|, 



(18) 



where ps and po and two extreme d® d Werner states 

Ps 



2 p _ ^ + -^ 



Pa 



d2-d 



Pas 



d^ -d 



(19) 



with the identity operator X on the d iSi d system 
and the flip operator T = X]i7=o l*-?)(-?*l- Then we 
have IIp"^"*-*'!!! = {d + 2)/d. Therefore, since the log- 
negativity is an upper bound of the distillable entangle- 
ment Q, the bipartite distiUable entanglement for the 



split AA'-BB'CC can be arbitrarily small by increasing 
d. Nevertheless, the state is always a secret-sharing state 
for any d. 

In conclusion, we have presented necessary and suffi- 
cient conditions for secret-sharing states, and have also 
shown that any secret-sharing state is bipartite distill- 
able for its all bipartite splits, and hence the states could 
be distillable into the GHZ state. We have furthermore 
generalized our results into multipartite cases, and have 
exhibited a class of secret-sharing states, which have an 
arbitrarily small amount of bipartite distillable entangle- 
ment for a certain split. 
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